Kory, On Thu, 02 Jan 2003 22:30:32 EST Kory Krofft wrote:
> Brad, > Here is what I can provide. I do not doubt you that Leaf may not > be the culprit. I have removed the secondary DNS IP from the TCP > config and run several of the tests you suggested. I noticed however > that once I removed the IP I no longer am experiencing the lag. Interesting. If you haven't already, you may want to play with "ipconfig /flushdns" (as suggested in an earlier post) and "ipconfig /displaydns". > It has only been a few hours so it may not be gone for good but time > will tell. All I do know is that my Win 98 systems have never > experienced the lag. I have never seen the lag in Win2K on any other > network but mine. See below for data. > > Brad Fritz wrote: > > > <Snip> > > > > - tcpdump packet dumps with and without the RR name > > server in the Win2k DNS list, > > > Tcpdump is not currently at my disposal. I am guessing that you don't have the means to install it currently. On the chance that you meant you just do not have a copy, the kwarchive version of tcpdump.lrp from http://leaf.sf.net/pub/packages-list.html works well for me. (It does not require a separate libpcap package.) > C:\>ipconfig /all (without secondary DNS) [output snipped] I don't see anything out of the ordinary here. > >C:\>ipconfig /all (With Sec. DNS) [output snipped] Again all looks normal. > > - test results from nslookup on Win2k in addition to > > (or rather than) browser observations (where there > > are more variables to consider, e.g. proxy settings) > > > C:\>nslookup > *** Can't find server name for address 192.168.1.254: Non-existent domain > *** Default servers are not available > Default Server: UnKnown > Address: 192.168.1.254 > > C:\> nslookup www.yahoo.net > Server: yahoo.com > Addresses: 64.58.79.230, 66.218.71.198 > Aliases: www.yahoo.net > > DNS request timed out. > timeout was 2 seconds. Interesting. All my dnscache replies are listed as non-authoritative. E.g: C:\>nslookup www.yahoo.net *** Can't find server name for address 192.168.70.1: Non-existent domain *** Default servers are not available Server: UnKnown Address: 192.168.70.1 Non-authoritative answer: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Name: yahoo.com Addresses: 66.218.71.198, 64.58.79.230 Aliases: www.yahoo.net And a packet capture shows dnscache (192.168.70.1:53) is really being queried: lab:/tmp# tcpdump -n -i vmnet1 tcpdump: listening on vmnet1 23:08:06.923778 192.168.70.128.1061 > 192.168.70.1.53: \ 1+ PTR? 1.70.168.192.in-addr.arpa. (43) 23:08:06.924346 192.168.70.1.53 > 192.168.70.128.1061: \ 1 NXDomain* 0/0/0 (43) (DF) 23:08:07.033592 192.168.70.128.1062 > 192.168.70.1.53: \ 2+ A? www.yahoo.net. (31) 23:08:07.033973 192.168.70.1.53 > 192.168.70.128.1062: \ 2 3/0/0 CNAME yahoo.com. (86) (DF) I am curious if the answers to your nslookup queries are coming from dnscache or a Win2K cache. (There is no information for www.yahoo.net in my "ipconfig /displaydns" output before or after running "nslookup www.yahoo.net".) Packet traces from your tests would definitely help get us out of guessing mode on this one. --Brad ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
